# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1714

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1715

---

## [Dérivé de la moyenne](https://discuss.elastic.co/t/derive-de-la-moyenne/212718)

<div class="topic-metadata">

**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\
**Replies:** 2\
**Last updated:** [December 21, 2019, 11:28am UTC](https://discuss.elastic.co/t/derive-de-la-moyenne/212718 "2019-12-21T11:28:54Z")

</div>

Bijoul, Peut-on calculer la dérivée d’une moyenne dans machine learning? Je vois la moyenne (median), j’entend parler de la dérivée sans la trouver, je questionne sur mon besoin. Cimer Omer

---

## [Get current username within a REST plugin](https://discuss.elastic.co/t/get-current-username-within-a-rest-plugin/212729)

<div class="topic-metadata">

**Author:** [@asfoor.hasan.m](https://discuss.elastic.co/u/asfoor.hasan.m)\
**Replies:** 0\
**Last updated:** [December 21, 2019, 9:13am UTC](https://discuss.elastic.co/t/get-current-username-within-a-rest-plugin/212729 "2019-12-21T09:13:52Z")

</div>

Greetings, I am trying to create a custom search API that filters the records based on users. I am extending the BaseRestHandler and I need to get the current user name within the prepareRequest method. I appreciate hel…

---

## [Dec 21st, 2019: \[EN\]\[Kibana\] Gain insights from large datasets with choropleth maps and Elastic maps](https://discuss.elastic.co/t/dec-21st-2019-en-kibana-gain-insights-from-large-datasets-with-choropleth-maps-and-elastic-maps/211814)

<div class="topic-metadata">

**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Replies:** 0\
**Last updated:** [December 21, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2019-en-kibana-gain-insights-from-large-datasets-with-choropleth-maps-and-elastic-maps/211814 "2019-12-21T08:00:07Z")

</div>

"Get It Done" is a San Diego initiative to engage citizens in reporting non-emergency problems like potholes, missed garbage collection, and street light outages. Smart phone applications make reporting easy. The "Get It…

---

## [Logstash - Parse formatted message with Ruby Code](https://discuss.elastic.co/t/logstash-parse-formatted-message-with-ruby-code/212469)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 4\
**Last updated:** [December 21, 2019, 7:27am UTC](https://discuss.elastic.co/t/logstash-parse-formatted-message-with-ruby-code/212469 "2019-12-21T07:27:35Z")

</div>

Hi, Thanks in advance for your time! I have as input a line like the one below : 2019-12-18 08:28:36.810082121 string \[number\] logLevel string: tag1=val1|tag2=val2|tag3=val3|tag4=val4|tag5=val5|tag6=val6| And I'd li…

---

## [Ingesting a web page](https://discuss.elastic.co/t/ingesting-a-web-page/212721)

<div class="topic-metadata">

**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\
**Replies:** 0\
**Last updated:** [December 21, 2019, 1:45am UTC](https://discuss.elastic.co/t/ingesting-a-web-page/212721 "2019-12-21T01:45:25Z")

</div>

Is there a way to access a URL and ingest the response of a web page in logstash? I need to analyze the rating of a company from some web sites that doesn’t have API.

---

## [Visualize](https://discuss.elastic.co/t/visualize/212717)

<div class="topic-metadata">

**Author:** [@gsuboc](https://discuss.elastic.co/u/gsuboc)\
**Replies:** 0\
**Last updated:** [December 21, 2019, 12:01am UTC](https://discuss.elastic.co/t/visualize/212717 "2019-12-21T00:01:19Z")

</div>

Does any body know how to visualize a log? I have a key\\value field on Discover message that I need to graph. Attached is the screenshot of the field I want to visualized.

---

## [Logical to physical mapping](https://discuss.elastic.co/t/logical-to-physical-mapping/212716)

<div class="topic-metadata">

**Author:** [@troy\_j\_hinkle](https://discuss.elastic.co/u/troy_j_hinkle)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 11:06pm UTC](https://discuss.elastic.co/t/logical-to-physical-mapping/212716 "2019-12-20T23:06:00Z")

</div>

I am currently looking to find any documents or diagrams that depict logical to physical devices or VMs for a project I am working on. I am working on the premise of a three node cluster to start for Elasticsearch and a…

---

## [Streaming Binary files’s decoded data to elastic. the binary files is location is a dynamic library. library need to be continuously checked for new files](https://discuss.elastic.co/t/streaming-binary-files-s-decoded-data-to-elastic-the-binary-files-is-location-is-a-dynamic-library-library-need-to-be-continuously-checked-for-new-files/212714)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 10:36pm UTC](https://discuss.elastic.co/t/streaming-binary-files-s-decoded-data-to-elastic-the-binary-files-is-location-is-a-dynamic-library-library-need-to-be-continuously-checked-for-new-files/212714 "2019-12-20T22:36:06Z")

</div>

I am wondering what tools I can use for streaming decoded data from binary files to elastic the the fastest way. Here is what I am trying to do. files are located at library . Those files are binary encoded files to s…

---

## [Streaming Binary files's decoded data to elastic](https://discuss.elastic.co/t/streaming-binary-filess-decoded-data-to-elastic/212712)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 10:19pm UTC](https://discuss.elastic.co/t/streaming-binary-filess-decoded-data-to-elastic/212712 "2019-12-20T22:19:38Z")

</div>

I am wondering what tools I can use for streaming decoded data from binary files to elastic the the fastest way. files are located at library and i want the library to be continuously checked for new files so the new da…

---

## [Monitor tasks piling up in master node (6.8.3)](https://discuss.elastic.co/t/monitor-tasks-piling-up-in-master-node-6-8-3/212547)

<div class="topic-metadata">

**Author:** [@retzkek](https://discuss.elastic.co/u/retzkek)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 10:14pm UTC](https://discuss.elastic.co/t/monitor-tasks-piling-up-in-master-node-6-8-3/212547 "2019-12-20T22:14:00Z")

</div>

We have a cluster of three dedicated masters, 19 data, and two coordinating nodes running version 6.8.3. We've been having infrequent, but ongoing, issues where cluster:monitor/stats tasks start piling up on the active m…

---

## [Timestamp\_options](https://discuss.elastic.co/t/timestamp-options/212711)

<div class="topic-metadata">

**Author:** [@ksarpong](https://discuss.elastic.co/u/ksarpong)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 9:14pm UTC](https://discuss.elastic.co/t/timestamp-options/212711 "2019-12-20T21:14:23Z")

</div>

Is there a way to set the timestamp to report for a specific time zone and not UTC when setting up a watcher? "range" : { "@timestamp" : { "gte" : "now-1m" } I would love to have something like this "time\_zone": "A…

---

## [Aggregate metricbeat 'host' info by ID & Unique host configuration?](https://discuss.elastic.co/t/aggregate-metricbeat-host-info-by-id-unique-host-configuration/212709)

<div class="topic-metadata">

**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 9:09pm UTC](https://discuss.elastic.co/t/aggregate-metricbeat-host-info-by-id-unique-host-configuration/212709 "2019-12-20T21:09:00Z")

</div>

Hi there. I'm trying to aggregate host configuration data out of metricbeat. I need to look at the documents for a single day, bucketing by ID, and return the host info. What I'm trying to do is watch for configuratio…

---

## [Viewing dead letter queue](https://discuss.elastic.co/t/viewing-dead-letter-queue/212710)

<div class="topic-metadata">

**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 9:00pm UTC](https://discuss.elastic.co/t/viewing-dead-letter-queue/212710 "2019-12-20T21:00:26Z")

</div>

Is there a good way to tail dead letter queue? It's a binary file so just using tail -f doesn't really work. I'm trying to track down some missing messages in a high volume system. I suspect they are hitting dlq but hard…

---

## [Send alert only if the error has http status code 500](https://discuss.elastic.co/t/send-alert-only-if-the-error-has-http-status-code-500/212689)

<div class="topic-metadata">

**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 8:58pm UTC](https://discuss.elastic.co/t/send-alert-only-if-the-error-has-http-status-code-500/212689 "2019-12-20T20:58:58Z")

</div>

I can send error alerts to a slack channel when an Java application send an error to APM. But I want to send only errors with status code 500. I tried to put the following in the bool filter but now the alert does not s…

---

## [Get oldest / newest document in \*beat](https://discuss.elastic.co/t/get-oldest-newest-document-in-beat/212229)

<div class="topic-metadata">

**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\
**Replies:** 7\
**Last updated:** [December 20, 2019, 8:57pm UTC](https://discuss.elastic.co/t/get-oldest-newest-document-in-beat/212229 "2019-12-20T20:57:00Z")

</div>

Greetings. I need to fetch the oldest or newest document saved into a beat. Someone asked this before and this was the suggested course of action: This approach will NOT work for metricbeat data because you cannot s…

---

## [Restarted one node - Kibana reports all data nodes as down](https://discuss.elastic.co/t/restarted-one-node-kibana-reports-all-data-nodes-as-down/212700)

<div class="topic-metadata">

**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 7:37pm UTC](https://discuss.elastic.co/t/restarted-one-node-kibana-reports-all-data-nodes-as-down/212700 "2019-12-20T19:37:56Z")

</div>

Hi there I am running a re-creational cluster at home for firewall logs and some nginx traffic logs. Recently I added two nodes to my setup and now there's 2 data nodes and one master non-data node. Today I tried to re…

---

## [Apply filters on child aggregation - performance issue](https://discuss.elastic.co/t/apply-filters-on-child-aggregation-performance-issue/212698)

<div class="topic-metadata">

**Author:** [@Dipak](https://discuss.elastic.co/u/Dipak)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 7:03pm UTC](https://discuss.elastic.co/t/apply-filters-on-child-aggregation-performance-issue/212698 "2019-12-20T19:03:52Z")

</div>

Hello, I am using parent-child relationship for product and it's availability/variants in stores. One product can have have 1000s of stores as child, and there are about 80k products. We have 3 shards and 3 powerful nod…

---

## [Mutate lowercase filter not been applied](https://discuss.elastic.co/t/mutate-lowercase-filter-not-been-applied/212693)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 2\
**Last updated:** [December 20, 2019, 7:00pm UTC](https://discuss.elastic.co/t/mutate-lowercase-filter-not-been-applied/212693 "2019-12-20T19:00:55Z")

</div>

Hello there, Im trying to use the lowercase filter but it seens that is not working. I want to apply the filter on "TargetDomainName" field so the results should be "contoso\_rt" instead of "CONTOSO\_RT" Can someone poin…

---

## [Shards on Kubernets](https://discuss.elastic.co/t/shards-on-kubernets/212697)

<div class="topic-metadata">

**Author:** [@SadeekM](https://discuss.elastic.co/u/SadeekM)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 6:57pm UTC](https://discuss.elastic.co/t/shards-on-kubernets/212697 "2019-12-20T18:57:26Z")

</div>

Hi, I have 12 Node Elastic Container running on, but issue is it's having 1 shard for each new data Set I tried to update using below command. Command curl -XPUT "http://IPAddress:PortNumber/\_all/\_settings?" -H 'Conten…

---

## [Endpoint Security on Elastic Stack Community Slack](https://discuss.elastic.co/t/endpoint-security-on-elastic-stack-community-slack/212696)

<div class="topic-metadata">

**Author:** [@tonymeehan](https://discuss.elastic.co/u/tonymeehan)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 6:36pm UTC](https://discuss.elastic.co/t/endpoint-security-on-elastic-stack-community-slack/212696 "2019-12-20T18:36:08Z")

</div>

In case you missed the announcement, we've got a community Slack setup for discussing endpoint security. See https://twitter.com/elastic/status/1207631666362998784 for more details and join us in #endpoint-security! -To…

---

## [Logstash output to elastic-search fails](https://discuss.elastic.co/t/logstash-output-to-elastic-search-fails/212695)

<div class="topic-metadata">

**Author:** [@J\_Warner](https://discuss.elastic.co/u/J_Warner)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 5:52pm UTC](https://discuss.elastic.co/t/logstash-output-to-elastic-search-fails/212695 "2019-12-20T17:52:28Z")

</div>

Hey recently deployed Elasticsearch via ECK and Logstash with deployment the problem I'm getting is when the connection between them two when I check the logs I get the following error: \[2019-12-20T17:47:53,592\]\[WARN…

---

## [Elasticsearch Cache is empty](https://discuss.elastic.co/t/elasticsearch-cache-is-empty/212692)

<div class="topic-metadata">

**Author:** [@vschaefer](https://discuss.elastic.co/u/vschaefer)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-cache-is-empty/212692 "2019-12-20T17:01:17Z")

</div>

Hello, I'm running the ELK Stack in a Docker container and use this image https://hub.docker.com/r/sebp/elk/ No matter which query I execute, the cache is always empty. I've setted the size param to 0 and \_source to …

---

## [Date field saved as default timezone](https://discuss.elastic.co/t/date-field-saved-as-default-timezone/211143)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 9\
**Last updated:** [December 20, 2019, 4:31pm UTC](https://discuss.elastic.co/t/date-field-saved-as-default-timezone/211143 "2019-12-20T16:31:10Z")

</div>

I am back at this. I am seating in CST time zone. most all my source are in CST time zone but all my date field is saved in Elasticsearch as GMT time zone. and my kibana (default setup as ) browser timezone is convert…

---

## [Elasticsearch cluser traffic distribution](https://discuss.elastic.co/t/elasticsearch-cluser-traffic-distribution/212676)

<div class="topic-metadata">

**Author:** [@mkalinowski](https://discuss.elastic.co/u/mkalinowski)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 4:28pm UTC](https://discuss.elastic.co/t/elasticsearch-cluser-traffic-distribution/212676 "2019-12-20T16:28:51Z")

</div>

Hello, I have a performance question. Suppose we have three elasticsearch nodes. The number of logstash is X :wink: Is it possible to configure the cluster in such a way that traffic from these logstash is distributed…

---

## [Elastic cluster slow down afre a few weeks of uptime(cluster recommendations)](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678)

<div class="topic-metadata">

**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\
**Replies:** 16\
**Last updated:** [December 20, 2019, 4:19pm UTC](https://discuss.elastic.co/t/elastic-cluster-slow-down-afre-a-few-weeks-of-uptime-cluster-recommendations/211678 "2019-12-20T16:19:12Z")

</div>

Hello everyone. I am new to the ELK world and this is my first post so I hope you will go easy on me. I am currently working on a reporting system for one of our inhouse projects. The problem is that we have a lots and …

---

## [Resolving Jar hell](https://discuss.elastic.co/t/resolving-jar-hell/212632)

<div class="topic-metadata">

**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 9:12am UTC](https://discuss.elastic.co/t/resolving-jar-hell/212632 "2019-12-20T09:12:33Z")

</div>

I have a custom plugin for Elasticsearch which has a dependency on httpclient and httpcore jar files. I see that these jars are part of Elasticsearch installation and hence want to use them instead of packaging these jar…

---

## [Winlogbeat flooding logstash with warnings. Handler in the pipeline did not handle the exception. Invalid version of beats protocol](https://discuss.elastic.co/t/winlogbeat-flooding-logstash-with-warnings-handler-in-the-pipeline-did-not-handle-the-exception-invalid-version-of-beats-protocol/212681)

<div class="topic-metadata">

**Author:** [@chunkychunkz](https://discuss.elastic.co/u/chunkychunkz)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 4:08pm UTC](https://discuss.elastic.co/t/winlogbeat-flooding-logstash-with-warnings-handler-in-the-pipeline-did-not-handle-the-exception-invalid-version-of-beats-protocol/212681 "2019-12-20T16:08:56Z")

</div>

Newbie to ELK stack here. However, I was able to get winlogbeat --\> Logstash --\> Elastic. I can see winlogbeat data from kibana, but my logs in logstash are flooded with warnings... should there be a concern? winlogbeat…

---

## [Queue on output](https://discuss.elastic.co/t/queue-on-output/212677)

<div class="topic-metadata">

**Author:** [@mkalinowski](https://discuss.elastic.co/u/mkalinowski)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 3:01pm UTC](https://discuss.elastic.co/t/queue-on-output/212677 "2019-12-20T15:01:08Z")

</div>

Hello, I read recently, there is something like "Persistent Queues". I also saw information about DLQ. And here my misunderstanding begins. I care about the problem when the cluster is down. It is important to me that…

---

## [Data Table and Tag Cloud filters are not working. Manual filters work properly](https://discuss.elastic.co/t/data-table-and-tag-cloud-filters-are-not-working-manual-filters-work-properly/211768)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 3\
**Last updated:** [December 20, 2019, 2:30pm UTC](https://discuss.elastic.co/t/data-table-and-tag-cloud-filters-are-not-working-manual-filters-work-properly/211768 "2019-12-20T14:30:16Z")

</div>

Hello, I have a user with role that has a read index privileges and Read Kibana privilege for Dashboards and Visualziations. When i pick value in Control or if i create it manually using + Add Filter it works just fine…

---

## [How to set a new time filter field?](https://discuss.elastic.co/t/how-to-set-a-new-time-filter-field/212298)

<div class="topic-metadata">

**Author:** [@florent1](https://discuss.elastic.co/u/florent1)\
**Replies:** 4\
**Last updated:** [December 20, 2019, 2:29pm UTC](https://discuss.elastic.co/t/how-to-set-a-new-time-filter-field/212298 "2019-12-20T14:29:09Z")

</div>

Hello everyone, I'm new to ES and Kibana so my question might be stupid, but I can't find how to set the filter time by default for my index. I've downloaded the kibana sample data eCommerce and it does have a time fie…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1713)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1715)
